Skip to content

Latest commit

 

History

History

opensearch

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
docs
docs
 
 
.terraform-docs.yml
.terraform-docs.yml
 
 
main.tf
main.tf
 
 
outputs.tf
outputs.tf
 
 
variables.tf
variables.tf
 
 
versions.tf
versions.tf
 
 

README.md

Requirements

Name Version
terraform ~> 1.0
aws ~> 5.0

Providers

Name Version
aws ~> 5.0
kubernetes n/a
random n/a

Modules

Name Source Version
opensearch_sg terraform-aws-modules/security-group/aws ~>5.2

Resources

Name Type
aws_opensearch_domain.opensearch resource
kubernetes_secret_v1.opensearch_credentials resource
random_password.opensearch_password resource
aws_iam_policy_document.opensearch data source

Inputs

Name Description Type Default Required
eks_nodes_sg_ids List of security group IDs attached to the EKS nodes. Used to allow traffic from the OpenMetadata application to the databases. list(string) n/a yes
kms_key_id The ARN of the KMS key to encrypt database and backups. Your account's default KMS key will be used if not specified. string null no
namespace Namespace to deploy the Kubernetes secret. Must be the OpenMetadata application's namespace. string n/a yes
opensearch Configuration for OpenSearch domain for OpenMetadata. 
object({
    aws = optional(object({                      # AWS specific configuration
      availability_zone_count = optional(number) # Number of availability zones to deploy the OpenSearch domain
      domain_name             = optional(string) # The OpenSearch domain name
      engine_version          = optional(string) # OpenSearch engine version
      instance_count          = optional(number) # Number of OpenSearch instances
      instance_type           = optional(string) # OpenSearch instance type
      tls_security_policy     = optional(string) # OpenSearch TLS security policy
    }))
    credentials = optional(object({
      username = optional(string)     # OpenSearch username
      password = optional(object({    # Password secret
        secret_ref = optional(string) # Secret reference for OpenSearch password
        secret_key = optional(string) # Secret key for OpenSearch password
      }))
    }))
    volume_size = optional(number) # OpenSearch storage size in GB
  })
 n/a yes
subnet_ids List of subnets IDs where the databases and OpenSearch will be deployed. The recommended configuration is to use private subnets. list(string) n/a yes
vpc_id VPC ID to deploy the databases and OpenSearch. For example: vpc-xxxxxxxx. string n/a yes

Outputs

Name Description
endpoint The endpoint of the OpenSearch domain
port The port of the OpenSearch domain. Hardcoded to 443
scheme The scheme of the OpenSearch domain. Hardcoded to https